Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CJNh_gmHlPH5bOkH4MnCz99OaZo.roa
File: CJNh_gmHlPH5bOkH4MnCz99OaZo.roa (raw, json)
Hash identifier: TOaSiqmTEJr6T3eXWIZs+m6/sg1xqGYGpba3krgtEqE=
Subject key identifier: 08:93:61:FE:09:87:94:F1:F9:6C:E9:07:E0:C9:C2:CF:DF:4E:69:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B192EBEF6B99B273CF0BAFF5EF38D80A9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CJNh_gmHlPH5bOkH4MnCz99OaZo.roa
Signing time: Tue 10 Oct 2023 10:42:55 +0000
ROA not before: Tue 10 Oct 2023 10:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 84.54.49.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.28.0/22 maxlen: 22
193.149.31.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
45.84.90.0/24 maxlen: 24
185.226.175.0/24 maxlen: 24
87.120.87.0/24 maxlen: 24
194.49.86.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
176.125.255.0/24 maxlen: 24
45.151.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:2e:be:f6:b9:9b:27:3c:f0:ba:ff:5e:f3:8d:80:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 10 10:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=089361fe098794f1f96ce907e0c9c2cfdf4e699a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:9d:05:9d:2e:17:0d:37:26:4b:ce:05:9b:
c1:c3:22:8d:84:f2:91:22:0e:2f:a5:d7:ac:03:8d:
ae:fb:0a:c4:7e:a8:e6:4c:06:75:75:55:a0:8d:e6:
ae:f3:25:3d:18:98:66:dd:44:04:02:15:89:97:26:
24:96:c7:d0:85:c5:fa:b2:80:3c:4b:db:ba:85:f4:
63:7f:31:31:ae:11:65:55:9a:15:5f:58:89:3a:47:
53:0a:16:e2:62:73:b1:47:ca:da:48:d1:a9:10:54:
b8:fa:52:72:70:82:c3:95:77:8f:fa:34:cb:bf:ea:
f1:25:9c:3f:f9:34:8c:98:0b:ab:fb:cc:bc:ed:f2:
22:87:86:8c:3f:a0:11:e3:95:c2:b2:c8:4e:4c:86:
7d:7d:d4:b6:63:a3:f3:cd:98:83:90:21:81:5d:10:
4a:cb:8d:46:1a:6d:02:a6:44:db:e9:84:f5:5b:d3:
dd:0c:bd:7e:ec:75:8d:67:18:1c:5f:60:82:d5:33:
69:3f:f3:fe:20:ac:19:87:e3:b2:33:b1:50:28:3b:
48:85:54:0a:cc:49:02:12:06:52:3e:08:80:a0:8b:
a9:da:b7:da:3b:9a:7d:54:d8:75:6a:50:ef:38:77:
b6:57:ad:c3:54:6a:7b:8d:d0:82:0d:7b:e4:a2:26:
73:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:93:61:FE:09:87:94:F1:F9:6C:E9:07:E0:C9:C2:CF:DF:4E:69:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CJNh_gmHlPH5bOkH4MnCz99OaZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
45.151.90.0/24
84.54.49.0/24
85.217.145.0/24
87.120.87.0/24
94.154.163.0/24
176.125.255.0/24
185.226.175.0/24
193.149.28.0/22
194.49.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:52:55:b0:95:8f:a8:64:4e:e3:a4:1d:7d:f0:c3:3e:e1:f6:
5b:df:ef:a5:3e:c4:40:8b:a3:8a:d7:b8:c5:c1:07:0c:6d:dc:
b4:8b:a5:fa:8b:ca:78:9c:7f:6c:1a:eb:fb:06:f8:52:cb:d6:
42:d4:fa:31:90:b8:0a:52:2e:18:34:ee:5e:76:f3:b5:02:f4:
1d:e0:3d:74:c6:e0:e2:08:61:d6:6f:c6:fd:fc:7c:57:d0:6f:
a8:6c:2b:a6:92:d9:e4:6d:8d:fb:a4:9e:99:57:53:62:c3:f2:
0e:68:c9:eb:0a:73:fd:1f:41:10:37:70:86:1e:76:bc:37:27:
5c:0b:3d:78:74:d0:e6:ba:d0:bb:e9:a8:13:08:54:6e:3f:ae:
b9:12:9c:49:cd:b9:ca:f6:60:4a:d6:8f:63:8c:d1:36:3b:a1:
b6:8f:94:cb:3b:22:a2:8f:b2:8a:5e:ed:1d:7a:98:b9:7a:0c:
e7:d6:43:3a:10:a5:2b:d6:ee:96:47:42:5a:dc:61:a2:29:dc:
76:ad:8b:60:ba:10:6c:5f:11:e8:9f:e6:8b:cd:6b:30:a1:44:
5e:48:15:a3:24:92:52:db:60:ee:b2:f6:f8:4a:1e:c2:77:9f:
52:fa:7d:3e:63:1b:37:87:78:56:be:57:1d:00:a6:d3:ae:50:
a8:a4:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 07:44:25 2023 by rpki-client on console-ams.rpki-client.org